Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft
File: SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft (raw, json)
Hash identifier: RgWieJ+nQV5sVMr/hqkWVzDfgvgfnEHadAJIZqa8GXY=
Subject key identifier: CA:8E:99:CD:4C:5E:2D:C1:E6:09:CE:6F:9D:9B:89:9D:53:5A:62:9F
Authority key identifier: 49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB
Certificate issuer: /CN=4986242B03FB4A9C1906127EFC4C05E3B9BDFEBB
Certificate serial: 1C9F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft
Manifest number: 1C9F
Signing time: Mon 28 Apr 2025 19:40:14 +0000
Manifest this update: Mon 28 Apr 2025 19:40:14 +0000
Manifest next update: Tue 29 Apr 2025 01:40:14 +0000
Files and hashes: 1: SYYkKwP7SpwZBhJ-_EwF47m9_rs.crl (hash: xLX7onZojidldv7wFYHBQ6Dqb14+OcYDF2AqqWPsfxE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7327 (0x1c9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986242B03FB4A9C1906127EFC4C05E3B9BDFEBB
Validity
Not Before: Apr 28 19:40:14 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=CA8E99CD4C5E2DC1E609CE6F9D9B899D535A629F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:d5:ff:ef:f0:c9:b2:23:3f:f9:52:85:8e:
0a:5c:11:71:ac:1e:5b:93:af:0e:be:8a:f6:13:04:
0b:36:3b:33:cd:85:b7:ce:a4:20:c5:df:3f:c7:14:
38:32:0a:f6:51:83:df:e2:6e:fb:71:ce:37:4f:3e:
b8:2a:91:64:8e:2b:80:db:a9:9d:a3:c9:8d:45:c4:
4f:42:e1:77:83:07:12:6f:7e:a8:03:fe:d7:f8:97:
16:56:21:89:1f:80:27:56:23:5d:9e:39:21:dd:8b:
c6:97:00:fd:b9:6f:c6:77:45:3a:cb:ec:38:58:f3:
65:3d:81:0e:d9:e9:74:4e:fc:b5:83:15:97:00:2e:
a7:76:f3:e6:3e:0c:c0:b7:f9:5b:91:f8:b7:85:ec:
cd:1a:05:db:65:ae:08:28:6d:ac:0a:04:10:b1:c2:
aa:7a:80:a2:92:6a:a7:00:3a:62:a9:49:94:9a:73:
8a:52:5a:b5:e7:43:df:f0:3a:9f:7b:51:27:27:c0:
4f:df:c1:26:36:72:96:0e:c7:47:15:d7:3d:fa:25:
34:4b:10:18:c3:c7:62:6d:49:58:46:42:19:d7:e1:
13:7f:cb:e4:51:da:b9:df:b8:cc:e3:63:dc:30:1b:
96:90:51:e7:88:fd:f7:1a:93:b8:05:60:59:4e:40:
62:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8E:99:CD:4C:5E:2D:C1:E6:09:CE:6F:9D:9B:89:9D:53:5A:62:9F
X509v3 Authority Key Identifier:
keyid:49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1d:97:cc:15:61:c8:d0:68:ea:a2:9d:c4:c3:78:32:ff:48:
64:4b:7f:c7:b5:62:ed:aa:0f:03:50:cc:e1:fe:79:fc:e1:f8:
35:af:97:a2:b3:f8:2c:79:28:a4:57:47:7f:39:b6:b9:3c:fc:
c2:dc:2a:42:15:f9:e5:8d:49:e4:3f:69:a1:4d:8c:82:f1:54:
0a:e6:72:96:31:09:95:c3:b3:dc:c4:6d:d0:b1:39:d6:f4:e3:
e8:ca:09:42:48:d2:93:78:70:82:1b:b6:c7:21:48:16:46:ca:
25:28:64:93:a6:71:92:ef:1d:5c:54:08:18:8a:9f:57:bc:b5:
5f:85:fd:84:e9:e4:d1:01:6a:bf:e1:89:ad:61:54:17:ce:33:
50:16:48:06:1e:0a:10:6d:e2:07:96:d7:0a:9d:ef:82:dd:76:
50:f7:b0:09:8f:85:55:43:87:23:3c:68:e9:b0:d9:1e:47:93:
d8:4f:1d:21:e2:fc:eb:91:0f:32:3d:04:f4:ef:bb:85:e4:d2:
56:6d:03:05:8a:2f:11:c9:22:9b:83:a9:0c:a2:e4:73:96:99:
96:f8:6f:76:59:8d:66:11:3d:c5:7b:91:e4:9a:7f:22:fd:b5:
40:1c:67:83:93:a2:f4:7b:ec:bc:8b:91:17:0a:97:be:65:16:
28:f7:ea:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:38 2025 by rpki-client on console.sobornost.net